a89b9fa665ed2528055d7e804f92ac9e_JaffaCakes118

General

Target
a89b9fa665ed2528055d7e804f92ac9e_JaffaCakes118
Size 448KB
Sample241127-ten4sazpcs
SHA256 87079def2a674ee9e669d3d5c22780513540ed32c814c4a8b64569a9d96ea5ab
MD5 a89b9fa665ed2528055d7e804f92ac9e
SHA1 a1199a7ab6e5b8659e203ba675648b6ca8c6a1d3
SHA512 e886b48ec759720b7a76c657f494169a39f67b89ab721944fbc01678b746b00f99f6669fe02c01fbfe0e50a41592d75c2e7473809e04b3772c14ce4cfc83975b
SSDEEP 12288:Hz8XVKZoQ5knvl72JhzA84NurFiMmEFZ2R/MxY:oKZoNJsh884IrQSaMxY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a89b9fa665ed2528055d7e804f92ac9e_JaffaCakes118

File Explorer

a89b9fa665ed2528055d7e804f92ac9e_JaffaCakes118

.exe 448KB

a89b9fa665ed2528055d7e804f92ac9e_JaffaCakes118

IMPHASH 00a47d6be4445a02dce374ef34dd9b76
SHA256 87079def2a674ee9e669d3d5c22780513540ed32c814c4a8b64569a9d96ea5ab
MD5 a89b9fa665ed2528055d7e804f92ac9e
SHA1 a1199a7ab6e5b8659e203ba675648b6ca8c6a1d3
SHA512 e886b48ec759720b7a76c657f494169a39f67b89ab721944fbc01678b746b00f99f6669fe02c01fbfe0e50a41592d75c2e7473809e04b3772c14ce4cfc83975b
SSDEEP 12288:Hz8XVKZoQ5knvl72JhzA84NurFiMmEFZ2R/MxY:oKZoNJsh884IrQSaMxY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8501

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wulasezezogiza-rosezutu\jifikexenemiji62_xuxehujojebih xezekefe.pdb

kernel32

SetProcessAffinityMask WriteConsoleInputW lstrlenA GetConsoleAliasesLengthW EnumDateFormatsExW FindResourceExW WriteConsoleOutputCharacterA EndUpdateResourceW GetUserDefaultLCID SetConsoleScreenBufferSize GetComputerNameW SetEvent GetSystemDefaultLCID GetProcessHeap ReadConsoleW SetFileTime WriteFile CreateActCtxW InitializeCriticalSection GetVolumePathNameW ActivateActCtx GetConsoleCP GlobalFindAtomA TerminateThread ReadConsoleInputA GetSystemWindowsDirectoryA ReadConsoleOutputW GetVersionExW SetConsoleCP InterlockedPopEntrySList DnsHostnameToComputerNameW GetConsoleAliasW VerifyVersionInfoA GetMailslotInfo GetTimeZoneInformation CreateActCtxA SetConsoleTitleA GetConsoleOutputCP InterlockedExchange GetLastError GetLongPathNameW SetLastError GetProcAddress GetConsoleDisplayMode EnterCriticalSection LoadLibraryA WriteConsoleA CreateTapePartition GetProfileStringA WaitForMultipleObjects SetEnvironmentVariableA GetModuleHandleA UpdateResourceW CancelTimerQueueTimer BuildCommDCBA VirtualProtect GetFileAttributesExW GetCPInfoExA SetCalendarInfoA FindFirstVolumeW GetCurrentProcessId GetPrivateProfileSectionW GlobalReAlloc GetSystemTime AreFileApisANSI CreateThread CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetStartupInfoW GetModuleHandleW Sleep ExitProcess GetStdHandle GetModuleFileNameA LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte RtlUnwind HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleW SetStdHandle

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

a89b9fa665ed2528055d7e804f92ac9e_JaffaCakes118

kernel32

user32

generic